diff --git a/compiler/pom.xml b/compiler/pom.xml
index 2173548aec..164bf6f151 100644
--- a/compiler/pom.xml
+++ b/compiler/pom.xml
@@ -103,7 +103,7 @@
         <profile>
             <id>release</id>
             <properties>
-                <log4j2_version>2.17.0</log4j2_version>
+                <log4j2_version>2.17.2</log4j2_version>
             </properties>
             <build>
                 <plugins>
diff --git a/dubbo-dependencies-bom/pom.xml b/dubbo-dependencies-bom/pom.xml
index 19da01fe1b..9628d1b93b 100644
--- a/dubbo-dependencies-bom/pom.xml
+++ b/dubbo-dependencies-bom/pom.xml
@@ -136,10 +136,10 @@
         <!-- Log libs -->
         <slf4j_version>1.7.25</slf4j_version>
         <jcl_version>1.2</jcl_version>
-        <log4j_version>1.2.16</log4j_version>
-        <logback_version>1.2.2</logback_version>
+        <log4j_version>1.2.17</log4j_version>
+        <logback_version>1.2.11</logback_version>
         <!-- Fix the bug of log4j refer:https://github.com/apache/logging-log4j2/pull/608 -->
-        <log4j2_version>2.17.0</log4j2_version>
+        <log4j2_version>2.17.2</log4j2_version>
         <commons_io_version>2.7</commons_io_version>
 
         <embedded_redis_version>0.10.0</embedded_redis_version>
diff --git a/dubbo-spring-boot/pom.xml b/dubbo-spring-boot/pom.xml
index 67511a04b9..82df8aa3e5 100644
--- a/dubbo-spring-boot/pom.xml
+++ b/dubbo-spring-boot/pom.xml
@@ -42,7 +42,7 @@
         <spring-boot.version>2.3.1.RELEASE</spring-boot.version>
         <dubbo.version>${revision}</dubbo.version>
         <!-- Fix the bug of log4j refer:https://github.com/apache/logging-log4j2/pull/608 -->
-        <log4j2_version>2.17.0</log4j2_version>
+        <log4j2_version>2.17.2</log4j2_version>
     </properties>
 
     <dependencyManagement>
@@ -192,4 +192,4 @@
             </plugin>
         </plugins>
     </build>
-</project>
\ No newline at end of file
+</project>
diff --git a/pom.xml b/pom.xml
index 89780e6c1b..c90262e80b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -323,7 +323,7 @@
         <profile>
             <id>release</id>
             <properties>
-                <log4j2_version>2.17.0</log4j2_version>
+                <log4j2_version>2.17.2</log4j2_version>
             </properties>
             <build>
                 <plugins>